The version of Thunderbird installed on the remote Windows host is prior to 139.0. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2025-45 advisory.

  - Memory safety bugs present in Firefox 138, Thunderbird 138, Firefox ESR 128.10, and Thunderbird 128.10.
    Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of     these could have been exploited to run arbitrary code. (CVE-2025-5268)

  - A double-free could have occurred in `vpxcodecencinitmulti` after a failed allocation when initializing     the encoder for WebRTC. This could have caused memory corruption and a potentially exploitable crash.
    (CVE-2025-5283)

  - Error handling for script execution was incorrectly isolated from web content, which could have allowed     cross-origin leak attacks. (CVE-2025-5263)

  - Due to insufficient escaping of the newline character in the Copy as cURL feature, an attacker could     trick a user into using this command, potentially leading to local code execution on the user's system.
    (CVE-2025-5264)

  - Due to insufficient escaping of the ampersand character in the Copy as cURL feature, an attacker     could trick a user into using this command, potentially leading to local code execution on the user's     system. This bug only affects Firefox for Windows. Other versions of Firefox are unaffected.
    (CVE-2025-5265)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2025:8308 advisory.

    Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and     portability.

    Security Fix(es):

    * firefox: thunderbird: Clickjacking vulnerability could have led to leaking saved payment card details     (CVE-2025-5267)

    * firefox: thunderbird: Potential local code execution in ?Copy as cURL? command (CVE-2025-5264)

    * firefox: thunderbird: Memory safety bugs (CVE-2025-5268)

    * firefox: thunderbird: Script element events leaked cross-origin resource status (CVE-2025-5266)

    * firefox: thunderbird: Error handling for script execution was incorrectly isolated from web content     (CVE-2025-5263)

    * firefox: thunderbird: Memory safety bug (CVE-2025-5269)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Debian 11 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-4191 advisory.

    - -------------------------------------------------------------------------     Debian LTS Advisory DLA-4191-1                debian-lts@lists.debian.org     https://www.debian.org/lts/security/               Emilio Pozuelo Monfort     May 29, 2025                                  https://wiki.debian.org/LTS
    - -------------------------------------------------------------------------

    Package        : firefox-esr     Version        : 128.11.0esr-1~deb11u1     CVE ID         : CVE-2025-5263 CVE-2025-5264 CVE-2025-5266 CVE-2025-5267                      CVE-2025-5268 CVE-2025-5269 CVE-2025-5283

    Multiple security issues have been found in the Mozilla Firefox web     browser, which could potentially result in the execution of arbitrary     code or cross-origin leaks.

    For Debian 11 bullseye, these problems have been fixed in version     128.11.0esr-1~deb11u1.

    We recommend that you upgrade your firefox-esr packages.

    For the detailed security status of firefox-esr please refer to     its security tracker page at:
    https://security-tracker.debian.org/tracker/firefox-esr

    Further information about Debian LTS security advisories, how to apply     these updates to your system and frequently asked questions can be     found at: https://wiki.debian.org/LTS

Tenable has extracted the preceding description block directly from the Debian security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Debian 12 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-5932 advisory.

    - -------------------------------------------------------------------------     Debian Security Advisory DSA-5932-1                   security@debian.org     https://www.debian.org/security/                       Moritz Muehlenhoff     May 30, 2025                          https://www.debian.org/security/faq
    - -------------------------------------------------------------------------

    Package        : thunderbird     CVE ID         : CVE-2025-4918 CVE-2025-4919 CVE-2025-5263 CVE-2025-5264                      CVE-2025-5266 CVE-2025-5267 CVE-2025-5268 CVE-2025-5269                      CVE-2025-5283

    Multiple security issues were discovered in Thunderbird, which could     result in the execution of arbitrary code.

    For the stable distribution (bookworm), these problems have been fixed in     version 1:128.11.0esr-1~deb12u1.

    We recommend that you upgrade your thunderbird packages.

    For the detailed security status of thunderbird please refer to     its security tracker page at:
    https://security-tracker.debian.org/tracker/thunderbird

    Further information about Debian Security Advisories, how to apply     these updates to your system and frequently asked questions can be     found at: https://www.debian.org/security/

    Mailing list: debian-security-announce@lists.debian.org

Tenable has extracted the preceding description block directly from the Debian security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - Red Hat Enterprise Linux - libvpx: Double-free in libvpx encoder  Ubuntu Linux - Use after free in libvpx     in Google Chrome prior to 137.0.7151.55 allowed a remote attacker to potentially exploit heap corruption     via a crafted HTML page. (Chromium security severity: Medium) (CVE-2025-5283)

Note that Nessus relies on the presence of the package as reported by the vendor.

The remote AlmaLinux 10 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2025:9120 advisory.

    * libvpx: Double-free in libvpx encoder (CVE-2025-5283)

Tenable has extracted the preceding description block directly from the AlmaLinux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-991234 advisory.

    Use after free in libvpx in Google Chrome prior to 137.0.7151.55 allowed a remote attacker to potentially     exploit heap corruption via a crafted HTML page. (Chromium security severity: Medium)

Tenable has extracted the preceding description block directly from the Unity Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of Tencent Linux installed on the remote TencentOS Server 2 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2025:0503 advisory.

    Package updates are available for TencentOS Server 2 that fix the following vulnerabilities:

    CVE-2025-5283:
    Use after free in libvpx in Google Chrome prior to 137.0.7151.55 allowed a remote attacker to potentially     exploit heap corruption via a crafted HTML page. (Chromium security severity: Medium)

Tenable has extracted the preceding description block directly from the Tencent Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The Rocky Linux 10.0 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-2025_8608 advisory.

    * firefox: thunderbird: Out-of-bounds access when resolving Promise objects (CVE-2025-4918)

    * firefox: thunderbird: Out-of-bounds access when optimizing linear sums (CVE-2025-4919)

    * firefox: thunderbird: Clickjacking vulnerability could have led to leaking saved payment card details     (CVE-2025-5267)

    * firefox: thunderbird: Potential local code execution in ?Copy as cURL? command (CVE-2025-5264)

    * firefox: thunderbird: Memory safety bugs (CVE-2025-5268)

    * firefox: thunderbird: Script element events leaked cross-origin resource status (CVE-2025-5266)

    * firefox: thunderbird: Error handling for script execution was incorrectly isolated from web content     (CVE-2025-5263)

    * firefox: thunderbird: Memory safety bug (CVE-2025-5269)

Tenable has extracted the preceding description block directly from the CIQ security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Published	Updated	Severity
237385	Mozilla Thunderbird < 139.0	Nessus	Windows	5/27/2025	11/18/2025	high
237454	RHEL 8 : firefox (RHSA-2025:8308)	Nessus	Red Hat Local Security Checks	5/29/2025	8/15/2025	medium
237493	Debian dla-4191 : firefox-esr - security update	Nessus	Debian Local Security Checks	5/29/2025	5/29/2025	medium
237589	Debian dsa-5932 : thunderbird - security update	Nessus	Debian Local Security Checks	5/30/2025	6/12/2025	high
244270	Linux Distros Unpatched Vulnerability : CVE-2025-5283	Nessus	Misc.	8/6/2025	9/25/2026	high
269836	AlmaLinux 10 : libvpx (ALSA-2025:9120)	Nessus	Alma Linux Local Security Checks	10/9/2025	10/9/2025	medium
278594	Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: libvpx (UTSA-2025-991234)	Nessus	Unity Linux Local Security Checks	12/13/2025	12/13/2025	medium
241477	TencentOS Server 2: libvpx (TSSA-2025:0503)	Nessus	Tencent Local Security Checks	7/7/2025	12/4/2025	medium
356463	Rocky Linux 10.0 [CIQ] Security Update: thunderbird / thunderbird-debuginfo / thunderbird-debugsource Multiple Vulnerabilities (crlsa-2025_8608)	Nessus	Rocky Linux Local Security Checks	10/1/2026	10/2/2026	critical

Detections

Analytics

Plugins Search

high

medium

medium

high

high

medium

medium

medium

critical